NetworkManager/0001-policy-restore-permissive-modify-system-defaults.patch
Josephine Pfeiffer 04af28bc2f
Update to 1.58.0 (rc1)
Also fix RPM scriptlet dependencies for udev-less installs:

Adjust %postun to skip udevadm when udevd isn't accessible, matching
%post. This lets the package install and remove inside a container or
rpm-ostree system without udev.

Move the /usr/sbin/update-alternatives dependency to the
initscripts-updown subpackage, which is the only consumer, and drop the
systemd-udev Requires(post) from the main package.

Backport of upstream 09e2de8b.

Resolves: RHEL-93551
Resolves: RHEL-126543
Resolves: RHEL-149149
Resolves: RHEL-126455
Resolves: RHEL-129186
Resolves: RHEL-140113
Resolves: RHEL-182559
Signed-off-by: Josephine Pfeiffer <josie@redhat.com>
2026-07-09 15:15:34 +02:00

33 lines
1.3 KiB
Diff

From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Josephine Pfeiffer <josie@redhat.com>
Date: Thu, 9 Jul 2026 00:00:00 +0200
Subject: [PATCH] policy: restore permissive modify.system defaults
RHEL 10 previously built NetworkManager with modify_system=true, which
allowed local console users to modify system connections without
authentication. Upstream 1.58 removed that build option and now defaults
the action to auth_admin_keep.
Keep the existing RHEL 10 behavior for minor-release compatibility.
---
data/org.freedesktop.NetworkManager.policy.in | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/data/org.freedesktop.NetworkManager.policy.in b/data/org.freedesktop.NetworkManager.policy.in
index c6797f47d2..548f69982a 100644
--- a/data/org.freedesktop.NetworkManager.policy.in
+++ b/data/org.freedesktop.NetworkManager.policy.in
@@ -117,8 +117,8 @@
<message>System policy prevents modification of network settings for all users</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
- <allow_inactive>auth_admin_keep</allow_inactive>
- <allow_active>auth_admin_keep</allow_active>
+ <allow_inactive>yes</allow_inactive>
+ <allow_active>yes</allow_active>
</defaults>
</action>
--
2.52.0